X-Git-Url: https://git.cworth.org/git?a=blobdiff_plain;f=NEWS;h=e57e9708a26826f5c854a4e28ca0185a7e446985;hb=3f44da70b1dab028301641f7cfe5da6e420d60d9;hp=3d2c2a8484fe856d60b7bcb17b5fdb5e3dcd6dc9;hpb=c8410bce8ba4fb40672f997e66ac4f94072b6349;p=obsolete%2Fnotmuch-old

diff --git a/NEWS b/NEWS
index 3d2c2a84..e57e9708 100644
--- a/NEWS
+++ b/NEWS
@@ -1,4 +1,4 @@
-Notmuch 0.11.1 (2012-mm-dd)
+Notmuch 0.11.1 (2012-02-03)
 ===========================
 
 Bug-fix release.
@@ -11,6 +11,17 @@ Fix error handling in python bindings.
   exceptions to indicate the error condition. Any subsequent calls
   into libnotmuch caused segmentation faults.
 
+Quote MML tags in replies
+
+  MML tags are text codes that Emacs uses to indicate attachments
+  (among other things) in messages being composed.  The Emacs
+  interface did not quote MML tags in the quoted text of a reply.
+  User could be tricked into replying to a maliciously formatted
+  message and not editing out the MML tags from the quoted text.  This
+  could lead to files from the user's machine being attached to the
+  outgoing message.  The Emacs interface now quotes these tags in
+  reply text, so that they do not effect outgoing messages.
+
 
 Notmuch 0.11 (2012-01-13)
 =========================